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IN THE CLAIMS 

1 . (Original) A method of obscuring cryptographic computations comprising: 
performing modular exponentiation in a cryptographic computation such that 

memory accesses are independent of the numerical value of the exponent. 

2. (Original) The method of claim 1 , wherein performing modular exponentiation 
comprises replacing a conditional multiplication operation with an unconditional 
multiplication operation. 

3. (Original) The method of claim 2, wherein the unconditional multiplication 
operation uses an obscuring factor. 

4. (Original) The method of claim 3, further comprising wherein for each bit in 
the exponent, determining the obscuring factor by multiplying a quantity by a selected bit 
of the exponent plus one, the quantity comprising a message minus one. 

5. (Original) The method of claim 1 , wherein the exponent comprises at least one 
of a signature exponent and a decryption exponent in a RSA cryptographic system, and 
the cryptographic computation is at least one of signature and decryption. 

6. (Original) The method of claim 5, wherein the cryptographic computation 
comprises c d mod n, wherein c comprises a ciphertext message, d comprises the 
decryption exponent, and n comprises a modulus that is a product of two prime numbers. 

7. (Original) The method of claim 1, wherein the modular exponentiation is 
performed as part of a Diffie-Hellman key exchange process. 

8. (Original) The method of claim 1, wherein the modular exponentiation is 
performed as part of a Digital Signature Algorithm (DSA) process. 
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9. (Original) The method of claim 1, further comprising applying a window 
method as part of performing the modular exponentiation and retrieving pre-computed 
powers from one to 2 V of a message from a memory, where v is the size of a window into 
the exponent's bits. 

10. (Original) A method of obscuring cryptographic computations by performing 
modular exponentiation of an exponent in a cryptographic computation such that memory 
accesses are independent of the exponent bit pattern comprising: 

setting an intermediate value to a message; and 

for each bit i in the exponent, setting the intermediate value to the intermediate 
value multiplied by the intermediate value mod a modulus, wherein the modulus 
comprises a product of two prime numbers, determining a current obscuring factor using 
the i'th bit of the exponent, and setting the intermediate value to the intermediate value 
multiplied by the current obscuring factor mod the modulus. 

1 1 . (Original) The method of claim 1 0, wherein determining the current 
obscuring factor comprises determining the current obscuring factor by multiplying a 
quantity by a selected bit of the exponent plus one, the quantity comprising the message 
minus one. 

12. (Original) The method of claim 10, wherein the exponent comprises at least 
one of a signature exponent and a decryption exponent in a RSA cryptographic system, 
and the cryptographic computation is at least one of signature and decryption. 

13. (Original) The method of claim 10, further comprising applying a window 
method as part of performing the modular exponentiation and retrieving pre-computed 
powers from one to 2 V of the message from a memory, where v is the size of a window 
into the exponent's bits. 
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14. -23. (Canceled) 

24. (Original) An article comprising: a storage medium having a plurality of 
machine readable instructions, wherein when the instructions are executed by a 
processor, the instructions provide for obscuring cryptographic computations by 
performing modular exponentiation of an exponent in a cryptographic computation such 
that memory accesses are independent of the numerical value of the exponent. 

25. (Original) The article of claim 24, wherein performing modular 
exponentiation comprises replacing a conditional multiplication operation with an 
unconditional multiplication operation. 

26. (Original) The article of claim 24, further comprising instructions for 
applying a window method as part of performing the modular exponentiation and 
retrieving pre-computed powers from one to 2 V of a message from a memory, where v is 
the size of a window into the exponent's bits. 

27. (Original) An article comprising: a storage medium having a plurality of 
machine readable instructions, wherein when the instructions are executed by a 
processor, the instructions provide for obscuring cryptographic computations by 
performing modular exponentiation of an exponent in a cryptographic computation such 
that memory accesses are independent of the exponent bit pattern, the instructions 
causing 

setting an intermediate value to a message; and 

for each bit i in the exponent, setting the intermediate value to the intermediate 
value multiplied by the intermediate value mod a modulus, wherein the modulus 
comprises a product of two prime numbers, determining a current obscuring factor using 
the i'th bit of the exponent, and setting the intermediate value to the intermediate value 
multiplied by the current obscuring factor mod the modulus. 
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28. (Original) The article of claim 27, wherein determining the current obscuring 
factor comprises determining the current obscuring factor as multiplying a quantity by a 
selected bit of the exponent plus one, the quantity comprising the message minus one. 

29. (Original) The article of claim 27, wherein the exponent comprises at least 
one of a signature exponent and a decryption exponent in a RSA cryptographic system, 
and the cryptographic computation is at least one of signature and decryption. 

30. (Original) The article of claim 27, further comprising instructions for 
applying a window method as part of performing the modular exponentiation and 
retrieving pre-computed powers from one to 2 V of a message from a memory, where v is 
the size of a window into the exponent's bits. 



31.-32. (Canceled) 



